Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
sample.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
sample.exe
Resource
win10-20230703-en
Target
c759f0f21cc1488c943a6d92553dc1cf7dda3e8dfb9aa98c56b17af48a597fed.bin.sample.gz
Size
29KB
MD5
c7537e7ccf48be22bbf4ac3ae7e02364
SHA1
6bd2eb1cf2cedaf8681a16fdc3140064df06eaf8
SHA256
3884fbefb3a0d76b0619b680f3121dc180a16edd57b3176ac299a919eb9c14f5
SHA512
ab17d7a41873088f9674670e04581ae6e0ce8f946037978cbd9f628c245c387b45042f829ce1411bcaab5d75495b6fea8a4b13866d72db8d4026393cbdcf1906
SSDEEP
768:xAY1c3dg8EdXh5PoXnMH0gC+09n317twcriBB+t7G:xdUdg1dh5o3dgx0JF7trri/x
resource | yara_rule |
---|---|
static1/unpack001/sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack002/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE